Known Vulnerabilities for Joomla! by Joomla
Listed below are 10 of the newest known vulnerabilities associated with "Joomla!" by "Joomla".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102784 json | Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-102783 json | Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contains the same prefix-only c... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-102782 json | Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0 - site/simplemembership... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-102781 json | Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper:... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-102780 json | Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 -... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-102779 json | Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-102778 json | Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension <... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-102777 json | Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-102776 json | Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-102775 json | Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1... | Not Provided | 2026-10-05 | 2026-10-05 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Joomla | Joomla! | 4.0.0 | |||
| Application | Joomla | Joomla! | 4.0.0 | |||
| Application | Joomla | Joomla! | 4.0.0 | |||
| Application | Joomla | Joomla! | 4.0.0 | |||
| Application | Joomla | Joomla! | 4.0.0 | |||
| Application | Joomla | Joomla! | 4.0.0 | |||
| Application | Joomla | Joomla! | 4.0.0 | |||
| Application | Joomla | Joomla! | 4.0.0 | |||
| Application | Joomla | Joomla! | 4.0.0 | |||
| Application | Joomla | Joomla! | 4.0.0 | |||
| Application | Joomla | Joomla! | 4.0.0 | |||
| Application | Joomla | Joomla! | 3.9.9 | |||
| Application | Joomla | Joomla! | 3.9.8 | |||
| Application | Joomla | Joomla! | 3.9.7 | |||
| Application | Joomla | Joomla! | 3.9.7 | |||
| Application | Joomla | Joomla! | 3.9.7 | |||
| Application | Joomla | Joomla! | 3.9.6 | |||
| Application | Joomla | Joomla! | 3.9.6 | |||
| Application | Joomla | Joomla! | 3.9.6 | |||
| Application | Joomla | Joomla! | 3.9.5 |